VDB
GSD-2008-2042
GSD-2008-2042
PUBLISHED
The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method, which allows remote attackers to execute arbitrary commands or trigger a buffer overflow via a crafted PDF file that invokes app.checkForUpdate with a malicious callback function.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
Timeline
- Nov 7, 2007 CVE Published
- Sep 9, 2013 PoC Published
- Sep 23, 2014 PoC Published
- Jul 2, 2021 PoC Published
- Jan 24, 2023 PoC Published
- Jul 30, 2025 PoC Published
References
- 3861 third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb08-13.html url
- ADV-2008-1966 vdb
- 20080507 Adobe Acrobat Professional Javascript For PDF Security Feature Bypass and Memory Corruption Vulnerabilities mailing-list
- 239286 vendor-advisory
- adobe-appcheckforupdate-code-execution(42237) vdb
- 30840 third-party-advisory
- 1019971 vdb